mirror of
https://github.com/Sea-Haven-Industries/seahaven-site.git
synced 2026-09-30 06:33:16 +00:00
d7848bedbc
Some checks are pending
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update: [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials).
Updates `aws-actions/configure-aws-credentials` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](517a711dbc...e6de054238)
---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
77 lines
2.7 KiB
YAML
77 lines
2.7 KiB
YAML
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
id-token: write # Required for OIDC
|
|
contents: read # Allows checkout of repo
|
|
|
|
# Never cancel a deploy mid-flight: cancelling between the S3 sync and the
|
|
# CloudFront invalidation (or mid `--delete`) would leave the bucket in a
|
|
# half-updated state. Queue instead.
|
|
concurrency:
|
|
group: deploy-${{ github.ref }}
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v7
|
|
|
|
- name: Set up Node
|
|
uses: actions/setup-node@v7
|
|
with:
|
|
node-version: "24"
|
|
cache: npm
|
|
|
|
- name: Build site
|
|
run: |
|
|
npm ci --ignore-scripts
|
|
npm run build
|
|
# Fail closed: never let a silently-empty build reach the --delete sync.
|
|
test -f _site/index.html
|
|
test -f _site/contact/index.html
|
|
test -f _site/404.html
|
|
count=$(find _site -type f | wc -l)
|
|
if [ "$count" -lt 40 ]; then
|
|
echo "::error::build produced only $count files (expected >= 40); aborting deploy"
|
|
exit 1
|
|
fi
|
|
echo "Build OK: $count files."
|
|
|
|
- name: Configure AWS credentials using OIDC
|
|
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6
|
|
with:
|
|
role-to-assume: arn:aws:iam::328440206208:role/githubdeploy_seahavensite
|
|
aws-region: us-east-1
|
|
|
|
- name: Sync build output to S3
|
|
run: |
|
|
# 1) Static assets — 1-day browser cache (no filename fingerprinting yet,
|
|
# so do NOT go immutable). CloudFront /* invalidation below keeps the
|
|
# edge fresh; this only affects returning visitors' browser cache.
|
|
aws s3 sync _site/ s3://seahaven.com --no-progress \
|
|
--exclude "*.html" --exclude "*.xml" --exclude "*.txt" \
|
|
--cache-control "public, max-age=86400"
|
|
|
|
# 2) HTML / sitemap / robots — always revalidate so a deploy is seen immediately.
|
|
aws s3 sync _site/ s3://seahaven.com --no-progress \
|
|
--exclude "*" --include "*.html" --include "*.xml" --include "*.txt" \
|
|
--cache-control "no-cache"
|
|
|
|
# 3) Prune files removed from the build. This pass sets no metadata, so
|
|
# it skips already-uploaded objects (preserving the Cache-Control set
|
|
# above) and only deletes objects no longer present in _site/.
|
|
aws s3 sync _site/ s3://seahaven.com --no-progress --delete
|
|
|
|
- name: Invalidate CloudFront cache
|
|
run: |
|
|
aws cloudfront create-invalidation \
|
|
--distribution-id EYK41AG0PO6XU \
|
|
--paths "/*"
|